First published: Wed Apr 14 2010(Updated: )
Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors.
Credit: psirt@adobe.com
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Acrobat Reader | =9.0 | |
Adobe Acrobat Reader | =9.1 | |
Adobe Acrobat Reader | =9.1.1 | |
Adobe Acrobat Reader | =9.1.2 | |
Adobe Acrobat Reader | =9.1.3 | |
Adobe Acrobat Reader | =9.2 | |
Adobe Acrobat Reader | =9.3 | |
Adobe Acrobat Reader | =9.3.1 | |
Adobe Acrobat Reader Notification Manager | =9.0 | |
Adobe Acrobat Reader Notification Manager | =9.1 | |
Adobe Acrobat Reader Notification Manager | =9.1.1 | |
Adobe Acrobat Reader Notification Manager | =9.1.2 | |
Adobe Acrobat Reader Notification Manager | =9.1.3 | |
Adobe Acrobat Reader Notification Manager | =9.2 | |
Adobe Acrobat Reader Notification Manager | =9.3 | |
Adobe Acrobat Reader Notification Manager | =9.3.1 | |
Apple iOS and macOS | ||
Microsoft Windows | ||
Adobe Acrobat Reader | =8.0 | |
Adobe Acrobat Reader | =8.1 | |
Adobe Acrobat Reader | =8.1.1 | |
Adobe Acrobat Reader | =8.1.2 | |
Adobe Acrobat Reader | =8.1.3 | |
Adobe Acrobat Reader | =8.1.4 | |
Adobe Acrobat Reader | =8.1.5 | |
Adobe Acrobat Reader | =8.1.6 | |
Adobe Acrobat Reader | =8.1.7 | |
Adobe Acrobat Reader | =8.2 | |
Adobe Acrobat Reader | =8.2.1 | |
Adobe Acrobat Reader Notification Manager | =8.0 | |
Adobe Acrobat Reader Notification Manager | =8.1 | |
Adobe Acrobat Reader Notification Manager | =8.1.1 | |
Adobe Acrobat Reader Notification Manager | =8.1.2 | |
Adobe Acrobat Reader Notification Manager | =8.1.4 | |
Adobe Acrobat Reader Notification Manager | =8.1.5 | |
Adobe Acrobat Reader Notification Manager | =8.1.6 | |
Adobe Acrobat Reader Notification Manager | =8.1.7 | |
Adobe Acrobat Reader Notification Manager | =8.2.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0195 has been assigned a CVSS score indicating that it is a critical vulnerability, allowing remote code execution.
To fix CVE-2010-0195, users should update to Adobe Acrobat and Reader version 9.3.2 or 8.2.2 and later.
CVE-2010-0195 affects Adobe Reader and Acrobat 9.x versions before 9.3.2 and 8.x versions before 8.2.2.
CVE-2010-0195 can be exploited by attackers to execute arbitrary code on the victim's machine through specially crafted PDF files.
No, CVE-2010-0195 affects Adobe Reader and Acrobat on both Windows and Mac OS X platforms.